Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File:                     _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier:          ss48KKMMMb5nj1BQBgPKCQU52/WP66flJ+EEcZh4Gjg=
Subject key identifier:   15:29:0C:A0:B5:C9:41:74:8A:E8:DB:21:69:05:32:42:A3:5F:28:C2
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer:       /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number:          0270
Signing time:             Sun 01 Mar 2026 02:33:37 +0000
Manifest this update:     Sun 01 Mar 2026 02:33:37 +0000
Manifest next update:     Sun 08 Mar 2026 02:33:37 +0000
Files and hashes:         1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: 4IGrXQr5lw7W5+nc2sc7KoQN+nXtSjqC6LSlFhpCGSA=)
                          2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: S8UZRzpubYCJ+X0jACj9ZehbJ6hRsnjRgE1noRmlqCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
        Validity
            Not Before: Mar  1 02:33:37 2026 GMT
            Not After : Mar  8 02:33:37 2026 GMT
        Subject: CN=69a3a581-b40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:9a:c1:cf:76:79:8c:56:e2:82:df:2d:96:
                    49:aa:34:67:ab:64:aa:32:59:df:2b:72:80:bb:1c:
                    f2:18:2f:92:50:b8:f3:85:0b:c9:b5:1e:bd:57:05:
                    f5:c9:82:4b:13:70:01:f1:7e:1f:56:de:de:aa:e9:
                    42:c4:e3:9d:1f:54:27:cc:e7:36:ac:72:f6:aa:f1:
                    15:e5:c0:0c:93:65:c7:06:12:82:14:cf:c6:11:4e:
                    09:a1:62:2f:2b:31:50:c7:73:11:ae:c0:34:3f:8d:
                    39:87:b8:0f:3c:94:94:14:2f:4c:74:3b:ff:4d:ec:
                    f4:4c:b4:96:cb:36:a2:7d:06:9f:45:27:53:56:22:
                    0e:be:8d:a9:16:c8:3a:c2:d5:db:0b:4b:da:7d:6e:
                    1a:2f:00:88:4d:da:4d:2a:97:12:e0:25:4b:15:ef:
                    ee:e0:24:6a:80:a8:6f:50:96:ee:83:49:dd:f6:e2:
                    b4:11:b3:c1:16:fd:eb:26:df:cb:d2:f6:11:0c:b8:
                    9c:db:ef:5e:fe:06:5c:59:20:05:cc:2f:13:59:1f:
                    6d:01:bc:dd:a9:53:01:93:1d:90:60:11:1f:bb:22:
                    60:4e:03:10:b2:9a:2d:9a:87:63:fc:a8:0c:5c:c4:
                    1a:36:c3:02:81:38:18:94:aa:a3:cf:c4:fd:2b:ec:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:29:0C:A0:B5:C9:41:74:8A:E8:DB:21:69:05:32:42:A3:5F:28:C2
            X509v3 Authority Key Identifier:
                keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ec:80:0c:ed:b0:8c:95:e6:44:c4:77:d7:0f:dc:59:1c:66:
         c4:20:16:d5:06:7b:92:10:45:08:fb:cc:f7:a6:48:0b:c4:fd:
         1c:7e:95:78:42:03:e3:22:d3:76:29:c9:44:b5:76:70:df:42:
         5f:f1:53:3c:0a:96:d3:5d:1a:66:73:03:0e:43:88:f5:2e:cf:
         f0:c4:31:6c:46:a3:55:27:9d:0a:3a:88:a7:43:52:d0:7f:24:
         4e:41:7c:7a:92:4d:9a:36:0e:04:a6:57:ea:13:6b:67:30:71:
         c0:4e:15:c8:5d:3f:21:92:c8:d7:03:c7:59:b0:4e:57:a8:eb:
         62:a8:b1:bc:75:02:4a:60:81:28:00:96:79:39:18:ab:80:1b:
         fa:c5:e3:79:1e:34:7c:bc:b5:b1:2c:f1:aa:a2:12:1a:57:93:
         55:d0:e9:30:af:45:47:c2:7c:24:16:2d:99:88:76:18:79:ef:
         99:50:ff:61:2d:f8:f1:e4:e6:07:28:4e:03:b3:f6:89:19:be:
         9f:82:15:f3:c1:6f:08:dc:99:e7:28:f7:f2:46:91:6d:69:ba:
         c4:a3:b0:d8:ad:8d:ce:d7:63:8e:30:bf:80:25:72:97:cb:9a:
         0f:e0:32:06:cd:70:db:2a:d1:bd:60:2a:b9:28:36:6d:a8:7a:
         cb:a2:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:54 2026 by rpki-client